Take Shodan results with a grain of salt. When you look at the entire IP4 space, you will find a little of anything. In a decade of doing pen tests in a mix of

Take Shodan results with a grain of salt. When you look at the entire IP4 space, you will find a little of anything. In a decade of doing pen tests in a mix of professionally capacity and informally for friends, I have never seen echo or daytime, and saw QOTD once on a test box on the CS department of a university. Of course, working with organizations who sought out someone to do a pentest probably self-selects out networks which would have this kind of nonsense. Reducing attack surface by turning off services or blocking them at various firewalls has been standard operating procedure for IT for at least 2 decades.