@alciregi Not really incredible. They try whatever they see open.
They are also adapting at some of the measures put in place, they went from trying a bunch of users and password all at the same time to 2 attempts every 8 hours to (try to) avoid being seen and blocked.