I have encountered numerous sites that port scan localhost via websocket/img onerror/etc.