Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

~snip~

There is so much wrong information posted.. i don't even know where to start.. anyways..

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

I think you are talking about a modem from a PLDT the password comes from the end of modem mac address it isn't the same as a router that mostly password are 12345678 or 1234567890.

No, i am talking about standard home router (which includes a modulator/demodulator; basically a standard device almost everyone has at home).

The password itself depends on how the vendor sets it. But most of them simply use the MAC, pass it into a function and get a 'random'-looking password.
But there are definitely some where the password is the same on all devices shipped.. but it doesn't matter anyway.

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

Honestly, it's not vulnerability you can still access every ISP/modem if the IP still can be scan through the internet that is why every modem has feature like "TCP/UDP PortScan" disabled or Anti-DDOS attack so that no one will find your IP

A port scan is not the same as an IP scan.

When scanning for open ports (TCP/UDP), a lot of packets on different ports are being sent to one host(IP).
Based on the answer you can determine whether the port is open/closed/filtered (for tcp; udp works slightly different).

Anti DoS is to protect you against a Denial of Service. An attacker, again, needs your IP before starting an DoS.

Both has nothing to do with 'that no one will find your IP".

By the way.. there are just about 4.000.000.000 IP's world wide.
This number is low enough to scan EVERY IP. And given the fact that you can reduce that number by focusing on a smaller geo location (than just the whole world), this just gets even easier..

Your IP is nothing private and does NOT have to stay private.

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

because if they can access it they can enable the SSH

If they already can access it, they don't need SSH.

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

enable the SSH of the modem and send a script where they can retrieve the admin password

If they are logged in as root via SSH, they do no longer need to retrieve the password.
If they are logged in as unprivileged user, they can NOT retrieve the root password (given there are no privilege escalation vulnerabilities).

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

retrieve the admin password of the ISP to fully control the modem.

There is no admin password of the ISP. There is a local administrator. You don't need any passwort from the Internet service provider...

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

I have a WiMAX experienced before where we can scan all modem except for dead ports and protected ISP

WiMAX is basically 4g. This has nothing to do with a home router.
Also, ISP's are not protected.. the devices itself are (or aren't).

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

That is why always enable DOS feature from the modem to prevent other user accessing your modem or change your public IP

As mentioned.. Anti DoS does NOT protect against access.. It protects against DoS..

Quote from: crairezx20 on April 30, 2019, 01:10:09 PM

because if they can access your modem anytime they can remote your PC without knowing.

No. That's not true.
Just because someone has access to one device inside of your local network, this does NOT mean that they have access to all devices.

Your post consisted of so much wrong information.
Please research everything before posting here and spreading misinformation.