Its not random, the internet and all IPV4 addresses are routinely scanned by bots both benign (google) and malicious (hackers, china, etc). IPV6 also gets scanned, but there are a lot more address so I see it less often. Once an open port is seen, there is generally a barrage of generic...