> Some random person who clicked on something they shouldn't have and is now part of a botnet which is continuously trying to brute force other boxes. No. Some

> Some random person who clicked on something they shouldn't have and is now part of a botnet which is continuously trying to brute force other boxes. No. Some random sysadmin stood up some business-tier gear and failed to change the factory default, static username and password. He then also failed to restrict access to the built-in web server and SSH server to only a trusted set of machines.