It's possible to access the HYBRID Web Console by using the default credentials. You should change these default credentials.
FOFA query rule: header=HYBRID && header=Unauthorized && header=httpd