Nice web site. However, I've got a server with 14 alpine-based docker containers in production. Among them 13 are widely distributed images (like web server, databases, etc.) and one is a custom build image. None of them have an SSH server publicly exposed. On the internal network, only 3 of them respond to SSH. I haven't tweaked their default SSH config. None were vulnerable to this attack.