> Even for regular IPv4s you often get upwards of 20-40k SSH probes per day trying common passwords against root

So...anyone here ever set up a throwaway machine with root ssh enabled with one of those common passwords, so that some of those could get in, so you could see what they actually try to do once they are in?

If so, what did you see?