Incapsula monitored access attempts at 1,000 client Web sites and found 94 percent were by malicious automated tools. The remaining attempts were either by people or “benevolent bots” The top 10 passwords used to crack the sites were “admin,” “123456” “123123,” “pass,” “1234 150,” “abc123” and “123321” Enforcing strong passwords is the first line of defense against such attacks, experts agree. Using two-factor authentication, such as a password and random number sent to a mobile phone, is another option.”]
Source: https://www.csoonline.com/article/2134138/automated-hacking-tools-swarm-web-site-login-pages.html