Could it be someone jumping on his wireless, far more likely an attack happening that way than from externally? He should change his wireless security to WPA2 and use a strong password if he already hasn't done so.
As has been mentioned above, an attack from the other side of his router is highly unlikely.