Comment by gobdovan
6 hours ago
Yes, <1h was a weak root password. All attacks I've seen directly were always user error. The point is effectively removing attack surfaces rather than enhancing security in needlessly exposed internet-facing protocols.
It must have been comically weak, like "root", "password" or something like that