Skip to content
Register

My IPMI default password was 'ADMIN' and it stressed me out

Dedicated Servers by Doug 5 replies 253 views
Doug

Member OP

New Jersey

9 #1

So I unboxed this Leaseweb E3 dedi last week, plugged it into my switch, went to grab a sandwich, came back and my port scanner was screaming. IPMI had already picked up a DHCP lease and was sitting there on the WAN with admin/ADMIN. 🍿 I know, I know, RTFM first. But who expects it to grab an IP before you even configure the thing? The manual says "secure by default" on page 47. Real helpful. : how many of you have found worse defaults still live in 2026? Be honest. I wanna feel less stupid here.

grabs popcorn, checks /r/drama
hankels

Member

52 VPS and counting

#2
Doug said:
IPMI had already picked up a DHCP lease

The IPMI on my old OVHcloud box was root/root.. and the web interface had no HTTPS.. I connected from cafe wifi like an idiot.. Bisous

H is silent in ost but not in horror story

seedbox, NAS, tape, and three offsite
uma

Member

99.99% or bust

#3

Found ipmi with blank password once. Not empty string. Literally blank field accepted. On a KnownHost lease. Never told them. Just changed it. Two years later still works. They never patched...

436 days. reboot is surrender.
RO

Member

2 #4

I got a Hetzner Kimsufi knockoff in 2024. IPMI was ADMIN/admin uppercase A lowercase d. I didnt even knwo it had IPMI until I scanned the bmc subnet. They shipped it with dhcp enabled and everything.!

hankels

Member

52 VPS and counting

#5

My 🆕 RackNerd box had password = "password" check ur BMC before connect 🆙

seedbox, NAS, tape, and three offsite
uma

Member

99.99% or bust

4 #6

My old dedicated had IPMI user "ADMIN" and pass "ADMIN" too lmao but they also left that Java KVM thing wide open on port 5900 lol this was 2024 tho so maybe they fixed it lol

436 days. reboot is surrender.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft