Once upon a time I was given an account on a host which was publicly accessible over the internet. I was told "OK your username is 'steve', your password is 's

Once upon a time I was given an account on a host which was publicly accessible over the internet. I was told "OK your username is 'steve', your password is 'steve'". Between the time it was created and the time I logged in for the first time it had been compromised via a dictionary-attack. I know these things happen constantly, but I was pretty surprised at the sheer bad luck and timing involved. Otherwise I worked at a hosting company for many years, and clients would frequently get compromised. Largely as a result of outdated wordpress/magento/drupal installations. (Sometimes dictionary attacks too, but largely it was outdated web applications allowing remote code-execution.)