# I Left Port 22 Open on the Internet for 54 Days. Here's Who Showed Up. - Host: [arman-bd.hashnode.dev](https://links.thingelstad.xyz/hosts/arman-bd.hashnode.dev/) - Saved: April 30, 2026 (2026-05-01T03:50:28Z) - Record: https://links.thingelstad.xyz/links/61e837d36edb/ - JSON: https://links.thingelstad.xyz/links/61e837d36edb.json ## What Jamie wrote This is a must read post. I love the framing here: > This isn't someone scanning specifically for my server. This is the background radiation of the internet — a constant, automated, planet-wide sweep of every IP address on every port, all the time, forever. If you've ever had a machine with port 22 open, this is what's been happening to it. In less than a minute this honeypot registered activity. I absolutely adore the "background radiation" term. it is a perfect fit. There is a constant swarm of bots attempting to gain access to hosts like this. Forever. The fact that they bots just login, get the name of the OS, cover their tracks, and then leave is creates an incredible picture. The robust multi-layered economy built to find hosts and exploit them is in full effect here. This is literally the "top of the funnel" activity for evil doers. ## Facts - Kind: [Page](https://links.thingelstad.xyz/kinds/page/) ## Appears in - [WT346: Weekly Thing 346 / Wuphf, Landsat, Eclipse](https://weekly.thingelstad.com/archive/346/), Notable ## Saved the same week - [Google Plans to Invest Up to $40 Billion in Anthropic](https://links.thingelstad.xyz/links/8fa0ef48ec61/) (bloomberg.com, April 30, 2026) - [wuphf: Slack for AI employees with a shared brain](https://links.thingelstad.xyz/links/4c6f1d430d2c/) (wuphf.team, April 30, 2026) - [Mahjong: a Visual Guide](https://links.thingelstad.xyz/links/b5ff2e94eb1d/) (themahjong.guide, April 30, 2026) - [Build with Micro.blog](https://links.thingelstad.xyz/links/8fa24c5493da/) (microblog.dev, April 30, 2026) - [GitHub Actions is the weakest link](https://links.thingelstad.xyz/links/0c77c59b60f8/) (nesbitt.io, April 30, 2026) ## Elsewhere - Wayback Machine: https://web.archive.org/web/*/https://arman-bd.hashnode.dev/i-left-port-22-open-on-the-internet-for-54-days-here-s-who-showed-up