One command, 3.6 seconds — and all five stages fit inside it
For three days straight, every completed session was Telnet. On day four it was SSH. The intruder stayed 3.6 seconds and typed exactly one command.
blog.securityhero.site
Every morning, what happened on our servers last night.
Real attacks our honeypot catches every day, told as stories worth reading.
- Sessions
- 1,361
- Unique IPs
- 216
- Commands run
- 1,333
- Login attempts
- 975
Observed 2026-08-19 · Yesterday's observations