[bayindirh]

Not exposing your management interface to internet and running a guest network which doesn't have access to said management interfaces can block 95%+ of the attacks, I believe.

[rootatixww3]

yes, defense in depth