Thousands of hacked TP-Link routers used in yearslong account takeover attacks
arstechnica.com
The botnet is being skillfully used to launch “highly evasive” password-spraying attacks.
  • pandapoo@sh.itjust.worksEnglish
    1·
    11 days ago

    Did you mean to send that reply to me?

    I ask because I’m not quite sure what specific suggestions you’re looking for.

    But in general, I would suggest not exposing port forwarding.

    What services are running behind NGINX? What router/firewall are you using?