
What the actual fuck?
"...make sure that ESXi isn't exposed to the public internet."
This is just FUBAR.
What else is there on the interwebs? SAN switches and storage arrays? Firewall management ports? Mainframes or supercomputers? All of these with default or 12345/Admin1! passwords?
Sadly, I wouldn't be surprised anymore.