I have set a 18 digit alpha numeric password which is auto-generated. I keep it safe on my puter in a text file.
I have set the CpHulk setting to block the IP after 5 failed login attempts.
So chances of any bot or human guessing it and breaking into my root user are very slim. But still I am curious should I worry about these failed login attempts? If they are trying, it means they hope they can break the password. No?
These attempts mostly come from three countries. China on number 1, Ukrain on 2 and Russia on 3.