What are common brute-force attack targets?

Common brute-force attack targets include:

1. Web Applications: Login forms on websites, especially those with weak password policies.
2. Remote Access Services: Services like SSH (Secure Shell) and RDP (Remote Desktop Protocol) that allow remote access to systems.
3. Email Accounts: Webmail services and email servers that can be accessed via login forms.
4. Database Management Systems: Databases that require authentication, such as MySQL or PostgreSQL.
5. VPNs (Virtual Private Networks): Remote access VPNs that require user credentials.
6. IoT Devices: Internet of Things devices that may have default or weak passwords.
7. VNC (Virtual Network Computing): Remote desktop services that can be accessed with weak passwords.

These targets are often chosen due to the potential for unauthorized access and the likelihood of weak or default credentials being used.