Re: Last count...
I actually found that with a company router.
Router had been setup for telnet access only, I idly searched on shodan and got a login prompt.
Quick explanation to my boss and an ACL was added to remove all access from any address not in Rfc1918 got me enough breathing space to plan an upgrade to a newer image.