So I installed miab on the 6th of this month and I noticed that since the 14th (4 days now) there have been consistent invalid logins from various IP addresses every 5 minutes or so.
So, I finally removed password login to be safe, and only public key access is allowed now.
My question was:
Am I relatively safe now?
Why am I the target? How did they find me?
Do these attempts increase my charges on DigitalOcean?
Thanks in advance!
Also, yesterday morning I received an odd email (in the same email I have miab) in Russian, asking me to sign up for some service for my server. (Interestingly I have a degree in Russian Studies, so it was an interesting coincidence.)