Some official distributions listened to all addresses by default (by design) until recently. https://blog.shodan.io/its-the-data-stupid/