If wireless modem's ADMIN password is left at default, is the modem easily hacked over the internet?

they would need to have a hard wire directly into your modem , so no , and dont believe these cyberpunks who say otherwise, even hackers need to dig for real information to "guess" passwords

It's good they would need to hard-wire directly to the modem.


Yeah I wasn't sure if someone could see the modem, and attempt login via the internet somehow. The password was set at "admin", which I've changed to a complex password. But it was that way for years. lol

Thanks

:womanrifle:

Yes, thank you RG Stanhope - I think mine might still be the default, though the wireless is not.

Good question, Bremerton! Thanks!

Freaked me out a bit tonight.
I rarely play with my modem but logged into it to change wireless settings, and realized - holy shit - the username and password are BOTH set to "admin"....NOT GOOD

Still, I bet SOMEONE could access it over the internet..........you never know....like the modem manufacturer personnel?

Oh dear! I'd better check mine again! Have to remember how to get into it. Hmmmmm

Go here:

[link to whatismyipaddress.com]


Then disconnect from your wifi and get on your cell network on your phone and attempt to access that IP via your browser.

Might be port 80, 443, 8080 - probably just https.


Then you will have your answer...

Last Edited by Apocalypse Troll on 12/31/2018 05:08 AM

Thanks!

Very kind of you! Thank you!

If your having trouble post the IP address here



That website will show you your external IP, just because a router does not give you a shiney webpage on that IP does not mean its not running services on that IP, such as remote access services - SSH, telnet, TR69 etc etc.

Change your password and username. turno off those remote services if possible, Keep your router firmware upto date.

your router is the doorway to all your connected devices, And the firmwares are often full of vulnerabilities and back doors. Most modern routers (especially ones given to you from ISPs) have TR69 turned on by default, which allows ISPs to change just about any setting on your router remotely- without your knowledge- They do this to be able to provide technical support to non tech savvy masses and also so they can roll out configuration changes on mass.


I use OpenWRT or LEDE devices and do all my own config.

I got into one years ago as it had port 80 open and it still had the default user and pass.

If remote administration isn't on, it is off by default nowadays, you'll be ok but you should change at least the default password.

Do not post your IP address here.

That's easily defeated.....just press the RESET BUTTON on the back to return to FACTORY DEFAULT settings

Default passwords for residential-grade wireless access points don't need to be guessed; they're published online with the OEM's support material. Most are going to be something like "admin/admin" or "admin/password." I sometimes have to install ATMs which all have the same administrator passwords when they come from the factory.

But it is true that if the wireless password is changed, then they would need hardwire access to the router to get into it.

Bear in mind that WEP and WPA1 wireless encryption have both been compromised. WPA2 has technically been compromised, but it takes a lot of CPU power and a lot of time to do it, so in practice it is still technically safe. For now.

Best practice is to immediately change all usernames and passwords on any network device as soon as you get it.

Most devices have an option for turning on remote administering on. It should be off by default

This is what would enable someone accessing over the internet—and not being on your local network

make sure it is disabled and change password

If they are close enough and can connect to your wifi, they can then access your modem. They don't need to be hard wired into it. There are freeware programs that can allow a technically capable person of fairly simply hacking your wifi password. So the potential assailant must only be within wifi range.

This is true for WEP and WPA1. WPA 2 is not quite that easy and WPA Enterprise is still secure.

True, but I'm only concerned about hackers coming in over the internet, not someone who may have physical access to my modem.

Thanks for all the responses, everyone.

I like the fact that hackers cannot access a person's modem over the internet - that's good to know from this thread.

if its a company like comcast they all use the same password

so yeah, you should change it

I use a third party modem, because renting one is a waste of money.

Comcast sucks, I use DSL so I don't have to use Comcast.