Yes, I scan them all: 53.2% No, I use default scan: 46.8% 186 votes Well, I doubt that. My private VMs have had ssh listening on some random port for t

Yes, I scan them all: 53.2% No, I use default scan: 46.8% 186 votes Well, I doubt that. My private VMs have had ssh listening on some random port for the last decade, after I was annoyed how the auth.log became an inreadable spam-fest. Now it's been well over a year since the last probe. Maybe the author's pentesting pals do that on a few public /24 or some intranet (I would, if I was a pentester). But you're average bad guy scanning /8 blocks looking for an easy catch? Maybe with a botnet... (TBH, I focused on security/crypto during university, but ended up in an other field - so my practical knowledge is limited).