well i just assume that a provider like @fiberstate 's wont let default passwords alive...

Hey! I can offer you a similar solution to the Hetzner storage box. Normally 1TB would cost 5eu/mo, but with a yearly commitment I can offer a 20% discount. Accessing is possible through SMB, (S)FTP,

(Quote)

(Quote)

We always ensure a random, 15 or more character password is set with every possible character set combination.

DRAC and iDRAC have common default passwords, iLO 4 and 5 do not, the unique default password is on the case.

We are most certainly NOT that provider. This is a real jump to go there, we do not and have never deployed a single server with a easy-to-guess or default SSH password.

While it is not responsibility per-se, but it is very good indication of secops culture of the provider. Today it is IPMI via public IP, tomorrow it is SSH with default password. Where is the end? Pub

(Quote)

(Quote)

* You’re very quickly brushing off the fact that you are deploying servers with public facing IPMI. This is where you should be accepting responsibility and telling customers you won’t rest until the

(Quote)

(Quote)

1) If it is public IP, what can I do apart from changing password?

(Quote)

Is there any notice or intent as to how this nefarious actor added 'administrator', or was it weak password?

(Quote)

(Quote)

No matter how strong the passwords are, its just a matter of time until its hacked.

i have a dedi, how to check ipmi enabled or not? and how to check its password?