Scanning all 65k ports takes time. Those aren't targeted attacks, just bots connecting to every 22 ports they can find