Most routers ship with default credentials like:

• admin / admin
  
  

• admin / password
  
  

Steps:

1. Open browser
   
   

2. Enter router IP (usually 192.168.1.1)
   
   

3. Login
   
   

4. Change admin username/password
   
   

This single step stops most automated attacks.