particularly as VPS providers typically auto assign a random character root password, suggests the weak one was specifically changed