> Can't imagine that any competent orgs would have externally-facing ssh or windows bastion hosts.

I have seen shit that would turn you white.