4 ms·
It's not targeted and has nothing to do with the box running a web server. These brute force login attempts starts only minutes after you put a new server with
by erikbye 7y ago
It's not targeted and has nothing to do with the box running a web server. These brute force login attempts starts only minutes after you put a new server with SSH exposed online.
Using default passwords and usernames like: admin, support, user, user2, student2, gitlab, git, postgres, cisco, root, ts3user, deploy, vagrant, jenkins, ftptest, 224, 130, dbadmin, sinusbot, mc, daniel, weblogic, guest, redmine, teamspeak, etc.
Checked a random box, lastb | wc -l shows 38k attempts since Feb 1.