{
  "id": "61e837d36edb",
  "url": "https://arman-bd.hashnode.dev/i-left-port-22-open-on-the-internet-for-54-days-here-s-who-showed-up",
  "title": "I Left Port 22 Open on the Internet for 54 Days. Here's Who Showed Up.",
  "note": "This is a must read post. I love the framing here:\n\n> This isn't someone scanning specifically for my server. This is the background radiation of the internet — a constant, automated, planet-wide sweep of every IP address on every port, all the time, forever. If you've ever had a machine with port 22 open, this is what's been happening to it.\n\nIn less than a minute this honeypot registered activity. I absolutely adore the \"background radiation\" term. it is a perfect fit. There is a constant swarm of bots attempting to gain access to hosts like this. Forever. \n\nThe fact that they bots just login, get the name of the OS, cover their tracks, and then leave is creates an incredible picture. The robust multi-layered economy built to find hosts and exploit them is in full effect here. This is literally the \"top of the funnel\" activity for evil doers.",
  "voice": "mixed",
  "saved": "2026-05-01T03:50:28Z",
  "host": "arman-bd.hashnode.dev",
  "kind": "page",
  "tags": [],
  "record": "https://links.thingelstad.xyz/links/61e837d36edb/",
  "markdown": "https://links.thingelstad.xyz/links/61e837d36edb.md",
  "issues": [
    {
      "number": 346,
      "slug": "346",
      "title": "Weekly Thing 346 / Wuphf, Landsat, Eclipse",
      "date": "2026-05-03T13:54:35.604000Z",
      "section": "Notable",
      "position": 4,
      "url": "https://weekly.thingelstad.com/archive/346/",
      "page": "https://links.thingelstad.xyz/issues/346/"
    }
  ],
  "connections": {
    "same_host": {
      "count": 0,
      "page": "https://links.thingelstad.xyz/hosts/arman-bd.hashnode.dev/",
      "nearest": []
    },
    "same_week": {
      "count": 22,
      "nearest": [
        {
          "id": "8fa0ef48ec61",
          "title": "Google Plans to Invest Up to $40 Billion in Anthropic",
          "url": "https://www.bloomberg.com/news/articles/2026-04-24/google-plans-to-invest-up-to-40-billion-in-anthropic",
          "record": "https://links.thingelstad.xyz/links/8fa0ef48ec61/"
        },
        {
          "id": "4c6f1d430d2c",
          "title": "wuphf: Slack for AI employees with a shared brain",
          "url": "https://wuphf.team",
          "record": "https://links.thingelstad.xyz/links/4c6f1d430d2c/"
        },
        {
          "id": "b5ff2e94eb1d",
          "title": "Mahjong: a Visual Guide",
          "url": "https://themahjong.guide/",
          "record": "https://links.thingelstad.xyz/links/b5ff2e94eb1d/"
        },
        {
          "id": "8fa24c5493da",
          "title": "Build with Micro.blog",
          "url": "https://microblog.dev/",
          "record": "https://links.thingelstad.xyz/links/8fa24c5493da/"
        },
        {
          "id": "0c77c59b60f8",
          "title": "GitHub Actions is the weakest link",
          "url": "https://nesbitt.io/2026/04/28/github-actions-is-the-weakest-link.html",
          "record": "https://links.thingelstad.xyz/links/0c77c59b60f8/"
        }
      ]
    },
    "mentions": [],
    "mentioned_by": [],
    "saved_twice": []
  },
  "elsewhere": {
    "wayback": "https://web.archive.org/web/*/https://arman-bd.hashnode.dev/i-left-port-22-open-on-the-internet-for-54-days-here-s-who-showed-up"
  }
}