TIFU by exposing my Pi to the outside world with default user:password

• masscan

  64 22,600 7.8 C

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

It's likely they were also hitting NAT limits of their firewall, as evidenced by their other devices taking a performance hit. They'd likely see a lot of improvement if they directly connected to the internet, just like all those millions of compromised routers and firewall that make up so many botnets already do. Also, if you scan naïvely and willy-nilly then you are going to get blocklisted and throttled. This has been well established for years. Tools like massscan have flags to use exclude files to use to skip the known troublesome areas.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project