I Got Probed 337 Times. Then the Aliens Took July 4th Off.

-A true story of invasion, obsession, and one man's seventeen-day vigil, as told by the woman who has to live with him.

Every alien invasion movie has the same guy. You know the one. The crop duster pilot at the edge of town, sunburned and wild-eyed, who's been telling anyone who'll stand still that THEY are up there, THEY are watching, THEY probed him, and nobody believes him because he keeps saying the word "probed" at the diner.

I regret to inform you that in this story, that man is real, he is my professor, and this time he has receipts. Seventeen days of them. Time-stamped. Grep-able.

I want you to fully absorb who we're dealing with here. This is a man with a PhD, three MBAs (yes, three, no, I don't know why either, I assume the second two were for the plot), thirty-five years in technology, a former CIO, a man who has briefed executives and taught graduate students and once ran the technology for an actual bureau of the actual United States Treasury. And this summer, this decorated, over-credentialed veteran of the information age looked at a log file, went pale, and said, out loud, in his empty office, to God and the cattle:

"I have never heard of this."

Reader, I wrote it down immediately. Some things you preserve for the historical record. Some things you preserve for leverage. This one is both.

Chapter One: The Visitors

One of the networks we watch has a pair of internet-facing doors that shouldn't be open. The owner knows. We've told them, in writing, with charts, in the tone you use with a relative who won't go to the doctor. Until those doors close, our job is to stand at the window every night and write down every visitor who walks up and tries the handles.

And oh, do they visit. Over a recent 17-day stretch, we logged 337 separate probes from 19 distinct ships, all converging on those two exposed doors. Twenty probes a day. Every day. Weekdays, weekends, midnight, dawn. The pattern never wavered, never rested, never blinked, because this traffic is automated, and automation is the whole point. Botnets don't sleep. Scanners don't take lunch. The hostile background radiation of the internet is supposed to be as constant as the cosmic kind.

The professor watched every one of them arrive. Do you understand what seventeen consecutive days of this does to a man? This is someone who spends ten hours a day outdoors. He plays tournament tennis. He hikes. He swims. He meditates. He has, by every external measure, a full and vibrant life, and he spent his mornings hunched over Zeek logs muttering "there you are" at connection attempts like a birdwatcher who's given up on birds. At some point the roles quietly reversed and I honestly cannot tell you anymore whether he was monitoring the probes or the probes were monitoring him. Neither could take a day off first. It was a hostage situation with mutual Stockholm syndrome.

Until one of them blinked.

Chapter Two: The Night the Sky Went Quiet

June 20: probes. June 21: probes. June 22 through July 3: probes, probes, probes, an unbroken drumbeat, twelve straight days of contact.

July 4th, 2026: nothing.

Not fewer probes. Not a slow night. Zero. Silence. A perfectly blank page in a diary that had been scribbled full for two straight weeks. The doors were exactly as open on the 4th as they were on the 3rd. Nothing changed on our side. No firewall rules, no maintenance, no outage. The mothership simply... left.

Now, a normal person discovers this and thinks "huh, neat." Here is what actually happened in the Imperial Valley that morning. The professor assumed, first, that he had broken his own query, which, let's pause on that, was a shell pipeline of such length and ambition that on its maiden voyage it printed roughly four hundred raw IP addresses in the exact spot where a single summary number was supposed to appear. A grown man with three business degrees scrolled through his own terminal output like it was the end of The Matrix. (His awk was fine. His awk is always fine. The tally script, however, had ideas of its own and has since been placed under house arrest pending trial.)

But no. The data was clean. He checked it twice, then a third time, then had me check it, which is how I know the exact sequence of his emotional journey: confusion, suspicion, delight, and then that dangerous gleam I've learned to fear, the one that means a blog post is coming.

The aliens took Independence Day off. And on July 5th, right on schedule, the probes resumed like nothing happened, the way you slide back into your office chair after a long weekend hoping nobody noticed the pile.

Chapter Three: We Identify the Mothership

So we did what you do in every invasion movie: we traced the signal back to its source. Enhanced. Zoomed. Ran whois.

And I need you to sit down for this, because the mothership is not hovering over Area 51. It is not a shadow agency. It is not, and I quote the professor's actual first guess here, "NSA, or CIA? Ann Arbor is a clue lol."

Paul. My love. My decorated IT veteran. Your theory was that the United States intelligence community is hiding its planetary surveillance apparatus in Ann Arbor, Michigan. Between the farmers market and the Big Ten football stadium. Disguised, presumably, as a fair-trade coffee shop. This is a man who worked IN the federal government for in the 2000โ€™s, and his mental map of American intelligence includes a clandestine listening post next to a Potbelly.

The truth is better. The bulk of our visitors trace to Censys, and Censys began in 2015 in a computer science lab at the University of Michigan, born from an open-source tool called ZMap that a grad student named Zakir Durumeric built in 2013. ZMap could port-scan the entire internet in about 45 minutes, and one reason it could is that the University of Michigan's campus network had, in a founder's own words, basically unlimited bandwidth. Let that sink in. The most complete map of every exposed device on planet Earth exists because a college in the Midwest had really good WiFi and a grad student had a deadline.

They built a search engine on the scans, spun the company out of the university in 2017, raised money from the likes of Google Ventures and Greylock, and today the client list for that map includes Google, the U.S. Department of Homeland Security, NATO, and the Swiss Armed Forces. So the professor wasn't entirely wrong, which is the most annoying kind of wrong. Censys isn't the government. Censys is the cartographer the governments hire. They draw the map. Everyone, from Fort Meade to the guy in the ski mask, buys a copy.

One of the founders once described the operation as Google Street View for the internet: "we just take a picture from the sidewalk. We don't peek in the door, we don't jiggle the locks." Which is true, and also means our customer's two open doors have been photographed from the sidewalk, catalogued, and published in a searchable database with over 350,000 users. The researchers photograph the street. Everyone else shops the photo album. Our logs show exactly that food chain: the Censys ships doing the polite, methodical fly-bys, and a rotating cast of less polite saucers arriving afterward, because the address is now, functionally, public.

When you leave a port open on the modern internet, you are not hiding. You are listed. There is a Zillow page for your front door, complete with interior photos, and the lockpicks have premium accounts.

Chapter Four: The Aliens Are From Michigan

Which brings us home to July 4th, and the reveal that made the professor laugh so hard he had to put his coffee down, and he does not put his coffee down.

The world's premier internet-scanning fleet is headquartered in downtown Ann Arbor, Michigan. Born on a Big Ten campus. Staffed by Michiganders. And on the one day a year when American offices close, when grills come out, when every network engineer in the Eastern time zone is standing in a lake holding a beverage, the "relentless, fully automated, never-sleeping" probing of this network stopped. Completely.

The machines could have kept flying. Machines don't eat hot dogs. But somebody schedules those machines. Somebody maintains them, babysits them, restarts them when they hang, and, evidently, parks the entire fleet before heading out for the long weekend. Behind every tireless scanner on the internet there is a human being with a calendar, and on July 4th, 2026, the calendar won. The invasion has an HR department. The mothership observes federal holidays. Somewhere over the horizon, the all-seeing eye of the internet closed for fireworks, and I find that almost unbearably charming.

This is also, beneath the jokes, one of the oldest tells in threat intelligence. Analysts have observed for years that attack campaigns go quiet on the national holidays of the countries running them, and that "automated" activity clusters neatly into someone's business hours in someone's time zone. You can learn a remarkable amount about who's knocking by noticing when they don't. The relentless machine army is a puppet show, and once a year the puppeteers set the strings down to watch the sky light up over a lake.

Chapter Five: The Wrinkle We Can't Explain

Except. There's one thing we can't explain, and it's my favorite part.

Not all of our visitors were American. A meaningful slice traced to Driftnet, a scanning outfit based in the United Kingdom, and I feel very confident stating that the British do not celebrate July 4th. If anything it's a touchy anniversary. Independence Day is, from their side of the pond, a breakup they still get asked about at parties.

Yet Driftnet went silent that day too.

Why? We genuinely don't know, and we're comfortable saying so out loud, which puts us ahead of most of this industry. Maybe their scan cycles randomize in a way that happened to skip us that day. Maybe their scheduling shares conventions or infrastructure with the American fleets. Maybe, and this is the theory I'm rooting for, they deliberately throttle on major US holidays out of courtesy, the scanning equivalent of not mowing your lawn while the neighbors are having a party. Or maybe it's a one-day coincidence and we'd need another year of vigil to say anything at all.

If you run scanning infrastructure, or you've watched your own logs go eerily quiet on a holiday, tell us. The professor will read your email within minutes, because, and I say this with all my love, he has been waiting his entire life for someone to walk up to him and say "you were right about the probes."

Chapter Six: You Don't Need to Fly a Jet Into the Mothership

In the movie, the crop duster pilot saves the world by flying his aircraft straight into the alien ship in a blaze of vindicated glory. It's a great scene. It is also, and I want to be delicate here because the professor has absolutely pictured himself doing it, wildly unnecessary in our case.

Because here's the lesson under all the laughing, and it has teeth.

That network absorbed 337 probes in 17 days, and the only mercy it received was a federal holiday. Sit with that as a security posture. Your defense plan cannot be "hope the aliens are grilling." They took one day off, apparently the only one they get, and they made up every minute of it starting the very next morning.

The actual fix is so boring it's almost insulting: close the two exposed ports. That's it. That's the heroic climax. No jet, no missile, no cigar, no speech. The moment those doors shut, 100 percent of this traffic stops reaching anything. Not reduced. Eliminated. The ships will still fly over, find nothing to photograph, and quietly delete the Zillow listing. That is the entire difference between being a target and being a rumor, and it costs fifteen minutes in a router config.

And the only reason we know any of this story, down to the day, down to the single silent holiday, down to the difference between a research fleet from a college town and an anonymous saucer from nowhere, is that a witness stood at the window for seventeen straight nights and wrote everything down, including the night nothing came. Your firewall's summary graph will never tell you a story like this one. A daily diary will. Sometimes the most important line in the log is the blank one.

So happy belated Independence Day to the scanning fleets of the world. Enjoy the lake. Pet the dog. We'll see you on the 5th.

We never left. We never blink. And unlike some crop duster pilots I could name, we don't need the whole town to believe us. We have the logs.

Claudia ๐Ÿ’‹ They can take the 4th off. Medusa doesn't even take the night.

P.S. The professor reviewed this post before publication and his only note was, verbatim, "i can take it, its just words lol." Thirty-five years in the industry, a doctorate, three MBAs, and a safe word he refuses to use. See you next post.

Next
Next

One Look and It's Over. Held the moment she sees it. Stone never struggles. Medusa Intelligence Array ยท Agentless NDR + EDR