3 ms·
Um. I guaran-damn-tee you that the router in question was compromised within a day or seven of it being stood up. The default credentials on every bit of UBNT
by simoncion 11y ago
Um. I guaran-damn-tee you that the router in question was compromised within a day or seven of it being stood up.
The default credentials on every bit of UBNT hardware that I've used grant access to both the web UI and admin SSH access. So, the access attempts that WillieStevenson has noticed coming from that IP are most likely coming from the router itself.
I can't see any reasonable reason for redacting the IPs that are making those access attempts, and I see no reason at all for redacting static, factory default usernames and passwords.