Remember when we all thought a simple password was enough?

I set up a Raspberry Pi as a honeypot in my home network about 6 months ago, just to see what would happen... It got hit with over 2,000 login attempts from a single IP in Moscow in under a day, mostly trying default credentials like 'admin' and 'password123'. It really showed me how automated and constant those basic attacks still are. What's a good, simple tool you'd recommend for someone to check their own network for weak spots like that?

2 comments

2 Comments

wells.morgan3d agoMost Upvoted

Is it really that big a deal if they're just trying default logins? Most home routers have decent firewalls now. What are they actually going to get into with just a weak password attempt?

dakota_rivera3d ago

Wow, I used to think exactly like @wells.morgan, that these were just dumb scripts and my router would block them. Seeing those thousands of attempts on my little Pi changed my mind fast. If something on your network, like a smart plug or camera, still has a default password, those scripts will find it and get in. For checking your own stuff, I run a free tool called "Advanced IP Scanner" sometimes just to see what devices are even connected.