Uninteresting, but simple test...
Just put a brand new machine on a publicly available (exposed) IP address, and wait. See how long it takes a "brand new" machine to become taken over.
My understanding is "not long" is a typical answer.
No, I wouldn't do this without some very good isolation and monitoring.
Biting the hand that feeds IT
