Thats good to hear!

I doubt that it is the password though.
The attack starts elsewhere. Maybe with a simple port scan.