[twawaaay]

Not necessarily. There are various ways to conceal a listening service, for example through knocking protocol.

[VectorLock]

If you're implementing a knocking protocol, you probably know enough to change the default password.