Open a port to the internet and you get thousands of sessions within hours, nearly all of them machines. This is how I built the classification and scoring layer that decides which ones a human should actually look at — and why covering your tracks scores higher than dropping a payload.
