Apparently over 1500 database servers were exposing the postgresql port to the internet protected only with a bruteforceable username and password 🤯
The people who hacked this to do crypto mining did those admins a fucking favour.
https://thehackernews.com/2025/04/over-1500-postgresql-servers.html